| Current Path : /var/www/element/data/logs/ |
| Current File : /var/www/element/data/logs/safehaven.fund.access.log |
162.158.108.70 - - [10/Jan/2026:00:13:36 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.23.253.129 - - [10/Jan/2026:00:15:28 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.253.129 - - [10/Jan/2026:00:15:33 +0300] "GET /.well-known/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.139 - - [10/Jan/2026:00:15:39 +0300] "GET /sites/default/files/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.115.166 - - [10/Jan/2026:00:15:43 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.253.129 - - [10/Jan/2026:00:15:47 +0300] "GET /uploads/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.139 - - [10/Jan/2026:00:15:53 +0300] "GET /images/ HTTP/1.0" 200 1079 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.139 - - [10/Jan/2026:00:15:57 +0300] "GET /images/ HTTP/1.0" 200 1079 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.230.142 - - [10/Jan/2026:00:16:04 +0300] "GET /images/wonum.php HTTP/1.0" 200 166 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.139 - - [10/Jan/2026:00:16:09 +0300] "GET /files/ HTTP/1.0" 404 456 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 172.70.126.81 - - [10/Jan/2026:00:17:36 +0300] "GET /?a=8811544929503 HTTP/1.0" 200 4103 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.160.173 - - [10/Jan/2026:00:18:01 +0300] "GET /?a=07927726105 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 104.23.190.185 - - [10/Jan/2026:00:18:01 +0300] "GET /?a=07927726105 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 162.158.102.218 - - [10/Jan/2026:00:18:12 +0300] "GET /index.php/jk HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3780 Safari/537.36 Edg/75.0.139" 162.158.63.128 - - [10/Jan/2026:00:39:26 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 460 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.154.70 - - [10/Jan/2026:00:39:37 +0300] "GET /.well-known/ HTTP/1.0" 404 460 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.159.147 - - [10/Jan/2026:00:39:45 +0300] "GET /sites/default/files/ HTTP/1.0" 404 460 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.46 - - [10/Jan/2026:00:39:55 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 460 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.154.70 - - [10/Jan/2026:00:40:09 +0300] "GET /uploads/ HTTP/1.0" 404 460 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.187.46 - - [10/Jan/2026:00:40:21 +0300] "GET /images/ HTTP/1.0" 200 1083 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.158.159.147 - - [10/Jan/2026:00:40:33 +0300] "GET /images/ HTTP/1.0" 200 1083 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.190.165 - - [10/Jan/2026:00:40:42 +0300] "GET /images/wonum.php HTTP/1.0" 200 166 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.23.175.40 - - [10/Jan/2026:00:43:24 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 172.70.208.17 - - [10/Jan/2026:00:47:43 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 172.68.164.43 - - [10/Jan/2026:01:13:35 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 108.162.216.57 - - [10/Jan/2026:01:45:31 +0300] "GET /?a=7019151784801 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 162.159.106.29 - - [10/Jan/2026:01:54:34 +0300] "GET /?j=fp7z48vbkyzlixg HTTP/1.0" 200 2848 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 172.64.192.129 - - [10/Jan/2026:01:56:34 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.214.55 - - [10/Jan/2026:02:00:59 +0300] "GET /sftp-config.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 172.71.214.55 - - [10/Jan/2026:02:01:00 +0300] "GET /.vscode/sftp.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 162.158.88.28 - - [10/Jan/2026:02:02:01 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.88.28 - - [10/Jan/2026:02:02:02 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund" "Go-http-client/2.0" 162.158.88.28 - - [10/Jan/2026:02:02:02 +0300] "GET /wp-login.php HTTP/1.0" 404 456 "http://safehaven.fund/wp-login.php" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.28 - - [10/Jan/2026:02:02:02 +0300] "GET /wp-admin/ HTTP/1.0" 404 456 "http://safehaven.fund/wp-admin/" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.88.28 - - [10/Jan/2026:02:02:02 +0300] "GET /administrator/ HTTP/1.0" 404 456 "http://safehaven.fund/administrator/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.88.6 - - [10/Jan/2026:02:02:03 +0300] "GET /user/login HTTP/1.0" 404 456 "http://safehaven.fund/user/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 162.158.88.6 - - [10/Jan/2026:02:02:03 +0300] "GET /admin HTTP/1.0" 404 456 "http://safehaven.fund/admin" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 162.158.88.6 - - [10/Jan/2026:02:02:03 +0300] "GET /login HTTP/1.0" 404 456 "http://safehaven.fund/login" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/117.0" 162.158.88.6 - - [10/Jan/2026:02:02:03 +0300] "GET /register HTTP/1.0" 404 456 "http://safehaven.fund/register" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 162.158.88.6 - - [10/Jan/2026:02:02:04 +0300] "GET /admin HTTP/1.0" 404 456 "http://safehaven.fund/admin" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 162.158.88.6 - - [10/Jan/2026:02:02:04 +0300] "GET /login HTTP/1.0" 404 456 "http://safehaven.fund/login" "Mozilla/5.0 (Android 13; Mobile; rv:117.0) Gecko/117.0 Firefox/117.0" 172.69.17.43 - - [10/Jan/2026:02:47:36 +0300] "GET /?a=5890850540000 HTTP/1.0" 200 4139 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.214.62 - - [10/Jan/2026:02:57:51 +0300] "GET /api/v1/guest/comm/config HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.70.214.62 - - [10/Jan/2026:02:57:52 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 172.70.240.85 - - [10/Jan/2026:02:57:52 +0300] "GET /api/v1/guest/comm/config HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 172.70.240.18 - - [10/Jan/2026:02:57:52 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 172.70.240.85 - - [10/Jan/2026:02:58:03 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.71.246.203 - - [10/Jan/2026:02:58:04 +0300] "GET /theme/default/assets/compoments.js HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.70.251.37 - - [10/Jan/2026:02:58:04 +0300] "GET /theme/default/assets/umi.js HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15" 172.70.251.130 - - [10/Jan/2026:02:58:05 +0300] "GET /user/umi.min.js HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 172.70.214.62 - - [10/Jan/2026:02:58:05 +0300] "GET / HTTP/1.0" 200 2848 "https://github.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 172.70.206.168 - - [10/Jan/2026:02:58:07 +0300] "GET /theme/default/assets/compoments.js HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0" 172.70.214.56 - - [10/Jan/2026:02:58:08 +0300] "GET /theme/default/assets/umi.js HTTP/1.0" 404 460 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 172.68.193.166 - - [10/Jan/2026:03:19:00 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:31 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:31 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:32 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:32 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:33 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:33 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:34 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:35 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:36 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:36 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:37 +0300] "GET /assets/images/accesson.php HTTP/1.0" 200 173 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:37 +0300] "POST /assets/images/accesson.php HTTP/1.0" 200 175 "https://safehaven.fund/assets/images/accesson.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 172.71.246.14 - - [10/Jan/2026:03:19:39 +0300] "POST /assets/images/4d1d6a8c7556.php HTTP/1.0" 200 175 "https://safehaven.fund/assets/images/accesson.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0" 104.23.168.26 - - [10/Jan/2026:03:22:07 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 172.70.46.84 - - [10/Jan/2026:03:23:02 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 104.23.168.26 - - [10/Jan/2026:03:23:04 +0300] "GET / HTTP/1.0" 200 2848 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 172.71.95.65 - - [10/Jan/2026:03:23:10 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 104.23.166.26 - - [10/Jan/2026:03:25:25 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.27 (KHTML, like Gecko) Chrome/47.0.2526.106 Safari/601.1.27" 172.71.183.109 - - [10/Jan/2026:03:25:43 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Linux; Android 7.1.1; MX6 Build/NMF26O; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/48.0.2564.116 Mobile Safari/537.36 T7/9.3 baiduboxapp/9.3.5.11 (Baidu; P1 7.1.1)" 172.71.95.72 - - [10/Jan/2026:03:26:12 +0300] "GET /favicon.ico HTTP/1.0" 200 1414 "-" "Dalvik/2.1.0 (Linux; U; Android 9.0; ZTE BA520 Build/MRA58K)" 172.69.17.43 - - [10/Jan/2026:03:29:00 +0300] "GET /?a=3724234367205 HTTP/1.0" 200 4071 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.140 - - [10/Jan/2026:03:31:00 +0300] "GET /?j=e3kat9869t8uf6p HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; GoogleOther)" 172.70.130.50 - - [10/Jan/2026:03:38:20 +0300] "GET /?a=2967382097408 HTTP/1.0" 200 4120 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.80 - - [10/Jan/2026:03:46:40 +0300] "GET /?a=7282099578500 HTTP/1.0" 200 4090 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:03:55:00 +0300] "GET /?a=978238999106 HTTP/1.0" 200 4104 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.80 - - [10/Jan/2026:03:56:59 +0300] "GET /?a=7019151784801 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.40 - - [10/Jan/2026:03:56:59 +0300] "GET /images/slider/slide1.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.111 - - [10/Jan/2026:03:57:00 +0300] "GET /css/templatemo_misc.css HTTP/1.0" 200 615 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.75 - - [10/Jan/2026:03:57:01 +0300] "GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.0" 200 6561 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.127.210 - - [10/Jan/2026:03:57:01 +0300] "GET /css/font-awesome.min.css HTTP/1.0" 200 60694 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.28 - - [10/Jan/2026:03:57:02 +0300] "GET /css/normalize.min.css HTTP/1.0" 200 1390 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.6.79 - - [10/Jan/2026:03:57:03 +0300] "GET /css/bootstrap.min.css HTTP/1.0" 200 17465 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.153 - - [10/Jan/2026:03:57:03 +0300] "GET /css/animate.css HTTP/1.0" 200 4751 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.163 - - [10/Jan/2026:03:57:04 +0300] "GET /images/slider/slide2.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.210 - - [10/Jan/2026:03:57:05 +0300] "GET /images/slider/slide3.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.223 - - [10/Jan/2026:03:57:06 +0300] "GET /images/slider/slide5.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.179.210 - - [10/Jan/2026:03:57:06 +0300] "GET /images/slider/slide4.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.168 - - [10/Jan/2026:03:57:07 +0300] "GET /images/slider/thumb3.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.7.104 - - [10/Jan/2026:03:57:08 +0300] "GET /js/main.js HTTP/1.0" 200 983 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.93 - - [10/Jan/2026:03:57:08 +0300] "GET /images/slider/thumb2.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.255.127 - - [10/Jan/2026:03:57:09 +0300] "GET /images/slider/thumb4.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.173 - - [10/Jan/2026:03:57:10 +0300] "GET /js/vendor/jquery-1.10.1.min.js HTTP/1.0" 200 33154 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.188 - - [10/Jan/2026:03:57:10 +0300] "GET /js/jquery.easing-1.3.js HTTP/1.0" 200 2306 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.58.88 - - [10/Jan/2026:03:57:11 +0300] "GET /images/slider/thumb5.jpg HTTP/1.0" 200 12040 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.142 - - [10/Jan/2026:03:57:12 +0300] "GET /images/slider/thumb1.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.130.171 - - [10/Jan/2026:03:57:12 +0300] "GET /js/plugins.js HTTP/1.0" 200 13370 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.22 - - [10/Jan/2026:03:57:13 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "https://safehaven.fund/?a=7019151784801" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.54 - - [10/Jan/2026:03:57:14 +0300] "GET /fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.0" 304 145 "https://safehaven.fund/css/font-awesome.min.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.126.81 - - [10/Jan/2026:03:58:19 +0300] "GET /?j=e1av7by3nvy868f HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; GoogleOther)" 104.23.166.36 - - [10/Jan/2026:04:11:27 +0300] "GET /js/main.js HTTP/1.0" 200 983 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 172.71.183.43 - - [10/Jan/2026:04:11:27 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3" 172.69.6.140 - - [10/Jan/2026:04:11:56 +0300] "GET /?a=1077166483201 HTTP/1.0" 200 4052 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.166.193 - - [10/Jan/2026:04:21:58 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:53 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.191 - - [10/Jan/2026:04:22:54 +0300] "GET /wp-includes/assets/ty.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.191 - - [10/Jan/2026:04:22:54 +0300] "GET /xmlrpc.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.191 - - [10/Jan/2026:04:22:54 +0300] "GET /autoload_classmap.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.191 - - [10/Jan/2026:04:22:55 +0300] "GET /NewFile.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.191 - - [10/Jan/2026:04:22:55 +0300] "GET /adminfuns.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:56 +0300] "GET /inputs.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:56 +0300] "GET /upload.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:56 +0300] "GET /simple.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:56 +0300] "GET /alfa-rex.php7 HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:57 +0300] "GET /tinyy.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:57 +0300] "GET /makeasmtp.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:57 +0300] "GET /elp.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:58 +0300] "GET /flower.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:58 +0300] "GET /bala.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:22:58 +0300] "GET /goods.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:59 +0300] "GET /bolt.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:59 +0300] "GET /man.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:59 +0300] "GET /bless.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:22:59 +0300] "GET /system.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:00 +0300] "GET /about.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.123 - - [10/Jan/2026:04:23:00 +0300] "GET /text.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.123 - - [10/Jan/2026:04:23:00 +0300] "GET /abcd.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:01 +0300] "GET /admin.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:01 +0300] "GET /files.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:01 +0300] "GET /file.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:02 +0300] "GET /moon.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:02 +0300] "GET /akcc.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:03 +0300] "GET /gecko-new.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:03 +0300] "GET /admin-header.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:03 +0300] "GET /edit.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:03 +0300] "GET /ioxi-o.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:04 +0300] "GET /info.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:04 +0300] "GET /lock360.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:04 +0300] "GET /ws.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:05 +0300] "GET /file4.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:05 +0300] "GET /wp-good.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:05 +0300] "GET /content.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 172.71.198.123 - - [10/Jan/2026:04:23:05 +0300] "GET /wp-signup.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:06 +0300] "GET /log.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:06 +0300] "GET /hplfuns.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:06 +0300] "GET /ahax.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:07 +0300] "GET /atomlib.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:07 +0300] "GET /server.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:07 +0300] "GET /wp-trackback.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:08 +0300] "GET /radio.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:08 +0300] "GET /wp-setup.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:08 +0300] "GET /options.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:08 +0300] "GET /wp-user.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:09 +0300] "GET /new.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:09 +0300] "GET /classwithtostring.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:09 +0300] "GET /bgymj.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.71.198.123 - - [10/Jan/2026:04:23:10 +0300] "GET /default.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:10 +0300] "GET /root.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:10 +0300] "GET /wp-file.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:10 +0300] "GET /themes.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:11 +0300] "GET /gmo.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:11 +0300] "GET /asasx.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:11 +0300] "GET /xleet.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 172.71.198.123 - - [10/Jan/2026:04:23:12 +0300] "GET /wp-error.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 172.71.255.124 - - [10/Jan/2026:04:25:37 +0300] "GET /?j=fgvgswjb82n9cl4 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; GoogleOther)" 172.69.59.10 - - [10/Jan/2026:04:27:36 +0300] "GET /?a=78299108110200 HTTP/1.0" 200 4103 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.50.148 - - [10/Jan/2026:04:28:18 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:21 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:22 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:23 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:24 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:26 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:29 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.69.50.148 - - [10/Jan/2026:04:28:31 +0300] "GET /assets/images/accesson.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2775.83 Safari/537.36" 172.64.198.40 - - [10/Jan/2026:04:41:20 +0300] "GET /?of=1 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3980 Safari/537.36 Edg/80.0.145.1" 172.70.130.51 - - [10/Jan/2026:04:45:16 +0300] "GET /?a=82809175981006 HTTP/1.0" 200 4161 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.135.94 - - [10/Jan/2026:04:46:13 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.69.6.140 - - [10/Jan/2026:05:01:56 +0300] "GET /?a=31881172146400 HTTP/1.0" 200 4054 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.80 - - [10/Jan/2026:05:12:07 +0300] "GET /?a=360716933403 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.176 - - [10/Jan/2026:05:12:10 +0300] "GET /css/templatemo_style.css HTTP/1.0" 200 3487 "https://safehaven.fund/?a=360716933403" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.130.196 - - [10/Jan/2026:05:12:19 +0300] "GET /images/templatemo_logo.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.255.123 - - [10/Jan/2026:05:12:20 +0300] "GET /images/service-second.png HTTP/1.0" 304 145 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.152 - - [10/Jan/2026:05:12:20 +0300] "GET /images/service-first.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.212 - - [10/Jan/2026:05:12:21 +0300] "GET /images/service-third.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.126.5 - - [10/Jan/2026:05:12:22 +0300] "GET /images/t-right.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.131.174 - - [10/Jan/2026:05:12:22 +0300] "GET /images/service-fourth.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.205 - - [10/Jan/2026:05:12:23 +0300] "GET /images/active-state.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.158.86 - - [10/Jan/2026:05:12:50 +0300] "GET / HTTP/1.0" 200 2848 "http://www.safehaven.fund" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.70.126.81 - - [10/Jan/2026:05:17:36 +0300] "GET /?a=47377268213907 HTTP/1.0" 200 4123 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.255.123 - - [10/Jan/2026:05:25:29 +0300] "GET /?a=08398122202 HTTP/1.0" 200 4045 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.42 - - [10/Jan/2026:05:33:23 +0300] "GET /?a=20319169911200 HTTP/1.0" 200 4064 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.183.47 - - [10/Jan/2026:05:39:37 +0300] "HEAD / HTTP/1.0" 200 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.170.192 - - [10/Jan/2026:05:39:37 +0300] "GET /.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.98.254 - - [10/Jan/2026:05:39:39 +0300] "GET /.env.production HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.95.60 - - [10/Jan/2026:05:39:46 +0300] "GET /.env.save HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.47 - - [10/Jan/2026:05:40:04 +0300] "GET /info.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.122 - - [10/Jan/2026:05:40:04 +0300] "GET /test.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.192 - - [10/Jan/2026:05:40:08 +0300] "GET /i.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:05:40:10 +0300] "GET /wp/phpinfo.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.122 - - [10/Jan/2026:05:40:10 +0300] "GET /phpinfo HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.102.17 - - [10/Jan/2026:05:40:10 +0300] "GET /info HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.47 - - [10/Jan/2026:05:40:11 +0300] "GET /.aws/credentials HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.95.60 - - [10/Jan/2026:05:40:13 +0300] "GET /secrets.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:05:40:31 +0300] "GET /.git/HEAD HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:05:40:39 +0300] "GET /.env.deploy HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.255.124 - - [10/Jan/2026:05:41:17 +0300] "GET /?a=08990272152804 HTTP/1.0" 200 4074 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.63.112 - - [10/Jan/2026:05:43:33 +0300] "GET /?j=fwmrjnabzte0mcv HTTP/1.0" 200 2848 "https://search.yahoo.co.jp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.186 - - [10/Jan/2026:05:43:35 +0300] "GET /css/bootstrap.min.css HTTP/1.0" 200 17465 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.230 - - [10/Jan/2026:05:43:35 +0300] "GET /css/animate.css HTTP/1.0" 200 4751 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.228 - - [10/Jan/2026:05:43:35 +0300] "GET /css/normalize.min.css HTTP/1.0" 200 1390 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.234.35 - - [10/Jan/2026:05:43:35 +0300] "GET /css/templatemo_style.css HTTP/1.0" 200 3487 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.254 - - [10/Jan/2026:05:43:35 +0300] "GET /css/templatemo_misc.css HTTP/1.0" 200 615 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.236 - - [10/Jan/2026:05:43:35 +0300] "GET /css/font-awesome.min.css HTTP/1.0" 200 60694 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.183 - - [10/Jan/2026:05:43:35 +0300] "GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.0" 200 6561 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.245 - - [10/Jan/2026:05:43:35 +0300] "GET /images/slider/slide1.jpg HTTP/1.0" 200 334269 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.179 - - [10/Jan/2026:05:43:35 +0300] "GET /images/slider/slide2.jpg HTTP/1.0" 200 277805 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.212 - - [10/Jan/2026:05:43:37 +0300] "GET /images/slider/slide4.jpg HTTP/1.0" 200 309516 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.113 - - [10/Jan/2026:05:43:37 +0300] "GET /images/slider/slide3.jpg HTTP/1.0" 200 314829 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.152 - - [10/Jan/2026:05:43:37 +0300] "GET /images/slider/slide5.jpg HTTP/1.0" 200 420676 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.213 - - [10/Jan/2026:05:43:37 +0300] "GET /js/vendor/jquery-1.10.1.min.js HTTP/1.0" 200 33154 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.33 - - [10/Jan/2026:05:43:38 +0300] "GET /js/jquery.easing-1.3.js HTTP/1.0" 200 2306 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.234.28 - - [10/Jan/2026:05:43:38 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.135 - - [10/Jan/2026:05:43:38 +0300] "GET /js/plugins.js HTTP/1.0" 200 13370 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.243 - - [10/Jan/2026:05:43:38 +0300] "GET /images/slider/thumb1.jpg HTTP/1.0" 200 11511 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.163 - - [10/Jan/2026:05:43:38 +0300] "GET /images/slider/thumb2.jpg HTTP/1.0" 200 10829 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.228 - - [10/Jan/2026:05:43:38 +0300] "GET /images/slider/thumb4.jpg HTTP/1.0" 200 10946 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.63 - - [10/Jan/2026:05:43:38 +0300] "GET /js/main.js HTTP/1.0" 200 983 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.170 - - [10/Jan/2026:05:43:38 +0300] "GET /images/slider/thumb3.jpg HTTP/1.0" 200 9141 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.138 - - [10/Jan/2026:05:43:38 +0300] "GET /images/slider/thumb5.jpg HTTP/1.0" 200 12040 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.102 - - [10/Jan/2026:05:43:38 +0300] "GET /images/t-right.png HTTP/1.0" 200 1228 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.13 - - [10/Jan/2026:05:43:38 +0300] "GET /images/t-left.png HTTP/1.0" 200 1217 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.169.186 - - [10/Jan/2026:05:43:38 +0300] "GET /images/templatemo_logo.png HTTP/1.0" 200 3095 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.234.31 - - [10/Jan/2026:05:43:38 +0300] "GET /images/service-second.png HTTP/1.0" 200 5128 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.100 - - [10/Jan/2026:05:43:38 +0300] "GET /images/service-third.png HTTP/1.0" 200 3170 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.243 - - [10/Jan/2026:05:43:38 +0300] "GET /images/service-first.png HTTP/1.0" 200 2418 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 141.101.86.59 - - [10/Jan/2026:05:43:38 +0300] "GET /images/service-fourth.png HTTP/1.0" 200 2648 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.241 - - [10/Jan/2026:05:43:39 +0300] "GET /fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.0" 200 44683 "https://safehaven.fund/css/font-awesome.min.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.233.219 - - [10/Jan/2026:05:43:39 +0300] "GET /images/active-state.png HTTP/1.0" 200 3077 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.69.63.102 - - [10/Jan/2026:05:43:40 +0300] "GET /favicon.ico HTTP/1.0" 200 1414 "https://safehaven.fund/?j=fwmrjnabzte0mcv" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 Edg/143.0.0.0" 172.70.126.80 - - [10/Jan/2026:05:49:11 +0300] "GET /?a=70076277662603 HTTP/1.0" 200 4094 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.56 - - [10/Jan/2026:05:57:04 +0300] "GET /?a=9045020793609 HTTP/1.0" 200 4084 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:06:04:58 +0300] "GET /?a=48577144394800 HTTP/1.0" 200 4137 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.232.133 - - [10/Jan/2026:06:08:40 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.4; http://mj12bot.com/)" 172.69.6.141 - - [10/Jan/2026:06:12:52 +0300] "GET /?a=39293239570508 HTTP/1.0" 200 4141 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.239.41 - - [10/Jan/2026:06:13:15 +0300] "GET /sitemap.xml HTTP/1.0" 404 456 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 172.70.143.194 - - [10/Jan/2026:06:15:13 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 172.69.6.141 - - [10/Jan/2026:06:20:45 +0300] "GET /?a=08121164063605 HTTP/1.0" 200 4080 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.80 - - [10/Jan/2026:06:28:39 +0300] "GET /?a=71931191959705 HTTP/1.0" 200 4123 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:06:36:32 +0300] "GET /?a=0807033776304 HTTP/1.0" 200 4129 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.56 - - [10/Jan/2026:06:45:26 +0300] "GET /?a=2028913552401 HTTP/1.0" 200 4113 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.230.160 - - [10/Jan/2026:06:49:41 +0300] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:41 +0300] "GET /motu.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:41 +0300] "GET /xsas.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /wen.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /xwpg.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /baee.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /iov.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /mds.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /mga.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /rendi59.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /bgymj.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /assacc.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /6y7t.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /monso.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /bnnof6.php HTTP/1.0" 404 456 "-" "-" 162.158.38.232 - - [10/Jan/2026:06:49:42 +0300] "GET /str.php HTTP/1.0" 404 456 "-" "-" 172.70.130.51 - - [10/Jan/2026:06:53:20 +0300] "GET /?a=86244242993700 HTTP/1.0" 200 4065 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.50.149 - - [10/Jan/2026:06:54:15 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund/" "Mozilla/5.0 (keys-so-bot)" 172.69.6.140 - - [10/Jan/2026:07:00:14 +0300] "GET /?a=04227209952503 HTTP/1.0" 200 4074 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.140 - - [10/Jan/2026:07:00:15 +0300] "GET /?a=751731162609 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.39 - - [10/Jan/2026:07:00:16 +0300] "GET /images/slider/slide1.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.74 - - [10/Jan/2026:07:00:17 +0300] "GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.0" 200 6561 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.28 - - [10/Jan/2026:07:00:17 +0300] "GET /css/normalize.min.css HTTP/1.0" 200 1390 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.127.209 - - [10/Jan/2026:07:00:18 +0300] "GET /css/font-awesome.min.css HTTP/1.0" 200 60694 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.152 - - [10/Jan/2026:07:00:18 +0300] "GET /css/animate.css HTTP/1.0" 200 4751 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.6.79 - - [10/Jan/2026:07:00:19 +0300] "GET /css/bootstrap.min.css HTTP/1.0" 200 17465 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.162 - - [10/Jan/2026:07:00:20 +0300] "GET /images/slider/slide2.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.111 - - [10/Jan/2026:07:00:20 +0300] "GET /css/templatemo_misc.css HTTP/1.0" 200 615 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.210 - - [10/Jan/2026:07:00:21 +0300] "GET /images/slider/slide3.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.179.209 - - [10/Jan/2026:07:00:22 +0300] "GET /images/slider/slide4.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.168 - - [10/Jan/2026:07:00:22 +0300] "GET /images/slider/thumb3.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.142 - - [10/Jan/2026:07:00:23 +0300] "GET /images/slider/thumb1.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.223 - - [10/Jan/2026:07:00:24 +0300] "GET /images/slider/slide5.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.188 - - [10/Jan/2026:07:00:24 +0300] "GET /js/jquery.easing-1.3.js HTTP/1.0" 200 2306 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.93 - - [10/Jan/2026:07:00:25 +0300] "GET /images/slider/thumb2.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.130.171 - - [10/Jan/2026:07:00:26 +0300] "GET /js/plugins.js HTTP/1.0" 200 13370 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.172 - - [10/Jan/2026:07:00:26 +0300] "GET /js/vendor/jquery-1.10.1.min.js HTTP/1.0" 200 33154 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.255.127 - - [10/Jan/2026:07:00:27 +0300] "GET /images/slider/thumb4.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.7.103 - - [10/Jan/2026:07:00:28 +0300] "GET /js/main.js HTTP/1.0" 200 983 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.23 - - [10/Jan/2026:07:00:28 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.58.89 - - [10/Jan/2026:07:00:29 +0300] "GET /images/slider/thumb5.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?a=751731162609" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.131.13 - - [10/Jan/2026:07:00:33 +0300] "GET /images/t-left.png HTTP/1.0" 200 1217 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.55 - - [10/Jan/2026:07:00:34 +0300] "GET /fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.0" 304 145 "https://safehaven.fund/css/font-awesome.min.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.64.198.40 - - [10/Jan/2026:07:01:36 +0300] "GET /index.php/jk HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_2_3 like Mac OS X; ja) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5" 108.162.249.61 - - [10/Jan/2026:07:02:53 +0300] "GET /.tresh/index.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:54 +0300] "GET /.well-known/ HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:54 +0300] "GET /.well-known/error.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:54 +0300] "GET /.well-known/gecko-litespeed.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:55 +0300] "GET //wp-includes/fonts/ HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:55 +0300] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:56 +0300] "GET /about/function.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:56 +0300] "GET /admin/controller/extension/extension/ HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:56 +0300] "GET /admin/controller/extension/extension/ultra.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:57 +0300] "GET /admin/controller/extension/extension/vx.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:57 +0300] "GET /admin/function.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:57 +0300] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:58 +0300] "GET /assets/ HTTP/1.0" 200 702 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:58 +0300] "GET /assets/images/ HTTP/1.0" 200 920 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:58 +0300] "GET /assets/vx.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:58 +0300] "GET /autoload_classmap/function.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:59 +0300] "GET /bk/index.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:02:59 +0300] "GET /cgi-bin/ HTTP/1.0" 403 459 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:02:59 +0300] "GET /css/admin.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:00 +0300] "GET /css/index.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:00 +0300] "GET /function/function.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:00 +0300] "GET /images/index.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:01 +0300] "GET /images/install.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.61 - - [10/Jan/2026:07:03:01 +0300] "GET /index.php/feed/atom/ HTTP/1.0" 200 2848 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:01 +0300] "GET /index/function.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:02 +0300] "GET /mah/function.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:02 +0300] "GET /update/gely.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:02 +0300] "GET /wp-admin/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:03 +0300] "GET /wp-admin/css/ HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:03 +0300] "GET /wp-admin/css/colors/ HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:03 +0300] "GET /wp-admin/css/colors/blue/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:04 +0300] "GET /wp-admin/css/colors/coffee/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:04 +0300] "GET /wp-admin/css/colors/midnight/ HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:04 +0300] "GET /wp-admin/images/ HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:04 +0300] "GET /wp-admin/includes/ HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:05 +0300] "GET /wp-admin/js/ HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:05 +0300] "GET /wp-admin/maint/ HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:05 +0300] "GET /wp-admin/network/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:06 +0300] "GET /wp-content/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:06 +0300] "GET /wp-content/plugins/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 108.162.249.61 - - [10/Jan/2026:07:03:06 +0300] "GET /wp-content/themes/ HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:07 +0300] "GET /wp-content/uploads/ HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:07 +0300] "GET /wp-includes/ HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 12; 2201116SG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:07 +0300] "GET /wp-includes/ID3/ HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:08 +0300] "GET /wp-includes/IXR/ HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; SM-A525F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:08 +0300] "GET /wp-includes/PHPMailer/ HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:08 +0300] "GET /wp-includes/Requests/ HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:09 +0300] "GET /wp-includes/Text/ HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:09 +0300] "GET /wp-includes/js/ HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 108.162.249.61 - - [10/Jan/2026:07:03:09 +0300] "GET /wp-includes/sodium_compat/ HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 108.162.249.61 - - [10/Jan/2026:07:03:10 +0300] "GET /wp-includes/block-bindings/index.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 172.70.126.81 - - [10/Jan/2026:07:08:09 +0300] "GET /?a=52920180334502 HTTP/1.0" 200 4071 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.108.70 - - [10/Jan/2026:07:15:14 +0300] "GET / HTTP/1.0" 200 2848 "http://safehaven.fund/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 172.71.255.124 - - [10/Jan/2026:07:16:01 +0300] "GET /?a=04972151691100 HTTP/1.0" 200 4064 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.130.50 - - [10/Jan/2026:07:22:50 +0300] "GET /?a=2276040873800 HTTP/1.0" 200 4047 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.140 - - [10/Jan/2026:07:29:39 +0300] "GET /?a=4117297881800 HTTP/1.0" 200 4092 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.140 - - [10/Jan/2026:07:36:28 +0300] "GET /?a=30268167480901 HTTP/1.0" 200 4073 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.255.123 - - [10/Jan/2026:07:44:17 +0300] "GET /?a=89137122527300 HTTP/1.0" 200 4153 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.130.131 - - [10/Jan/2026:07:51:34 +0300] "HEAD / HTTP/1.0" 200 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.65 - - [10/Jan/2026:07:51:38 +0300] "GET /.env.production HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.68.228 - - [10/Jan/2026:07:51:43 +0300] "GET /.env.old HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.229.65 - - [10/Jan/2026:07:51:43 +0300] "GET /.env.save HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.225.16 - - [10/Jan/2026:07:51:43 +0300] "GET /wp-content/.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.126.58 - - [10/Jan/2026:07:51:45 +0300] "GET /.env.backup HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.133 - - [10/Jan/2026:07:51:47 +0300] "GET /wp/.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.167 - - [10/Jan/2026:07:51:56 +0300] "GET /info.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.133 - - [10/Jan/2026:07:51:56 +0300] "GET /test.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.223.163 - - [10/Jan/2026:07:52:00 +0300] "GET /i.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.131 - - [10/Jan/2026:07:52:04 +0300] "GET /phpinfo HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.133 - - [10/Jan/2026:07:52:08 +0300] "GET /config.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.232.133 - - [10/Jan/2026:07:52:13 +0300] "GET /appsettings.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.202 - - [10/Jan/2026:07:52:13 +0300] "GET /application.yml HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.223.163 - - [10/Jan/2026:07:52:15 +0300] "GET /config.php.bak HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.223.163 - - [10/Jan/2026:07:52:19 +0300] "GET /.git/config HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.130.131 - - [10/Jan/2026:07:52:23 +0300] "GET /.git-credentials HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.68.151.134 - - [10/Jan/2026:07:52:24 +0300] "GET /.gitconfig HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.118.167 - - [10/Jan/2026:07:52:34 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.135.93 - - [10/Jan/2026:07:52:34 +0300] "GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.0" 200 6561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.123.141 - - [10/Jan/2026:07:52:42 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.126.81 - - [10/Jan/2026:07:53:06 +0300] "GET /?a=21718178385302 HTTP/1.0" 200 4118 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.100.175 - - [10/Jan/2026:07:54:22 +0300] "GET /css/templatemo_style.css HTTP/1.0" 200 3487 "https://safehaven.fund/?j=fj3iogrb4b7hnho" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; GoogleOther)" 172.70.179.79 - - [10/Jan/2026:07:56:55 +0300] "GET /?a=01233128895305 HTTP/1.0" 200 4028 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.42 - - [10/Jan/2026:08:03:44 +0300] "GET /?a=8295096735602 HTTP/1.0" 200 4090 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.255.124 - - [10/Jan/2026:08:10:34 +0300] "GET /?a=26341241109202 HTTP/1.0" 200 4114 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:08:19:23 +0300] "GET /?a=20199258249208 HTTP/1.0" 200 4113 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.79 - - [10/Jan/2026:08:25:12 +0300] "GET /?a=2997956242804 HTTP/1.0" 200 4109 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.80 - - [10/Jan/2026:08:31:01 +0300] "GET /?a=2502986796000 HTTP/1.0" 200 4097 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.43 - - [10/Jan/2026:08:38:50 +0300] "GET /?a=19358200831403 HTTP/1.0" 200 4108 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.187.52 - - [10/Jan/2026:08:41:52 +0300] "GET /?j=ffac7bybnl2ow0j HTTP/1.0" 200 2848 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.4074.84 Safari/537.36" 172.69.59.10 - - [10/Jan/2026:08:44:40 +0300] "GET /?a=77281206803813 HTTP/1.0" 200 4116 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.111.230 - - [10/Jan/2026:08:50:16 +0300] "GET /file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 162.158.158.8 - - [10/Jan/2026:08:50:17 +0300] "GET /public/file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.190.184 - - [10/Jan/2026:08:50:17 +0300] "GET /vendor/file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 162.158.62.119 - - [10/Jan/2026:08:50:17 +0300] "GET /file-manager/ckeditor HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.115.166 - - [10/Jan/2026:08:50:18 +0300] "GET /file-manager/tinymce5 HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.187.139 - - [10/Jan/2026:08:50:18 +0300] "GET /file-manager/fm-button HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.187.139 - - [10/Jan/2026:08:50:18 +0300] "GET /file-manager/dialog HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.71.203.84 - - [10/Jan/2026:08:50:19 +0300] "GET /file-manager/content HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.115.166 - - [10/Jan/2026:08:50:19 +0300] "GET /public/file-manager/content HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.187.139 - - [10/Jan/2026:08:50:19 +0300] "GET /laravel-file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.71.203.84 - - [10/Jan/2026:08:50:19 +0300] "GET /public/laravel-file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.187.139 - - [10/Jan/2026:08:50:24 +0300] "GET /file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.111.230 - - [10/Jan/2026:08:50:24 +0300] "GET /public/file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 162.158.62.119 - - [10/Jan/2026:08:50:24 +0300] "GET /vendor/file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.111.230 - - [10/Jan/2026:08:50:24 +0300] "GET /file-manager/ckeditor HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.190.184 - - [10/Jan/2026:08:50:25 +0300] "GET /file-manager/tinymce5 HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.190.184 - - [10/Jan/2026:08:50:25 +0300] "GET /file-manager/fm-button HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 162.158.158.8 - - [10/Jan/2026:08:50:25 +0300] "GET /file-manager/dialog HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.111.230 - - [10/Jan/2026:08:50:25 +0300] "GET /file-manager/content HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.71.203.84 - - [10/Jan/2026:08:50:26 +0300] "GET /public/file-manager/content HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.70.111.230 - - [10/Jan/2026:08:50:26 +0300] "GET /laravel-file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 104.23.187.139 - - [10/Jan/2026:08:50:26 +0300] "GET /public/laravel-file-manager/tinymce HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Linux; Android 11; Redmi Note 9 Pro Build/RKQ1.200826.002; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/101.0.4951.61 Mobile Safari/537.36" 172.71.102.16 - - [10/Jan/2026:08:50:31 +0300] "HEAD / HTTP/1.0" 200 259 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:50:38 +0300] "GET /.env.local HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.170.193 - - [10/Jan/2026:08:50:39 +0300] "GET /.env.production HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:08:50:44 +0300] "GET /.env.bak HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.168.112 - - [10/Jan/2026:08:50:47 +0300] "GET /.env.old HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.170.193 - - [10/Jan/2026:08:50:57 +0300] "GET /wp-content/plugins/wp-mail-smtp/.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.95.60 - - [10/Jan/2026:08:51:00 +0300] "GET /.env.backup HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.122 - - [10/Jan/2026:08:51:02 +0300] "GET /.env.prod HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.168.112 - - [10/Jan/2026:08:51:05 +0300] "GET /wp/.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.29 - - [10/Jan/2026:08:51:07 +0300] "GET /.env.staging HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:08:51:10 +0300] "GET /bootstrap/.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:51:15 +0300] "GET /phpinfo.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.122 - - [10/Jan/2026:08:51:21 +0300] "GET /php.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.192 - - [10/Jan/2026:08:51:25 +0300] "GET /wp-admin/phpinfo.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.168.112 - - [10/Jan/2026:08:51:27 +0300] "GET /i.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.255.123 - - [10/Jan/2026:08:51:28 +0300] "GET /?a=00171106513200 HTTP/1.0" 200 4181 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.168.112 - - [10/Jan/2026:08:51:33 +0300] "GET /wp/phpinfo.php HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.29 - - [10/Jan/2026:08:51:36 +0300] "GET /phpinfo HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.168.112 - - [10/Jan/2026:08:51:38 +0300] "GET /info HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 141.101.76.66 - - [10/Jan/2026:08:51:41 +0300] "GET /.aws/credentials HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:51:44 +0300] "GET /config.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.102.17 - - [10/Jan/2026:08:51:47 +0300] "GET /secrets.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.170.193 - - [10/Jan/2026:08:51:51 +0300] "GET /credentials.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.29 - - [10/Jan/2026:08:51:53 +0300] "GET /appsettings.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.47 - - [10/Jan/2026:08:51:55 +0300] "GET /application.yml HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.170.155 - - [10/Jan/2026:08:51:57 +0300] "GET /server.js HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.29 - - [10/Jan/2026:08:52:04 +0300] "GET /config.php.bak HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.182.56 - - [10/Jan/2026:08:52:07 +0300] "GET /config.js HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.47 - - [10/Jan/2026:08:52:09 +0300] "GET /settings.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.70.46.66 - - [10/Jan/2026:08:52:12 +0300] "GET /.git/config HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.95.59 - - [10/Jan/2026:08:52:18 +0300] "GET /.git-credentials HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.47 - - [10/Jan/2026:08:52:22 +0300] "GET /swagger.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:52:24 +0300] "GET /.env.deploy HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.123 - - [10/Jan/2026:08:52:27 +0300] "GET /configuration.php.bak HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.168.112 - - [10/Jan/2026:08:52:29 +0300] "GET /config/secrets.env HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:52:32 +0300] "GET /api/swagger.json HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.99.2 - - [10/Jan/2026:08:52:34 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.159.113.140 - - [10/Jan/2026:08:52:50 +0300] "GET /js/jquery.easing-1.3.js HTTP/1.0" 200 2306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.102.17 - - [10/Jan/2026:08:52:52 +0300] "GET /js/jquery.easing-1.3.js.map HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.71.183.43 - - [10/Jan/2026:08:52:55 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.192 - - [10/Jan/2026:08:53:02 +0300] "GET /js/bootstrap.js.map HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.172.52 - - [10/Jan/2026:08:53:05 +0300] "GET /js/plugins.js HTTP/1.0" 200 13370 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.36 - - [10/Jan/2026:08:53:19 +0300] "GET /js/main.js HTTP/1.0" 200 983 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 104.23.166.192 - - [10/Jan/2026:08:53:22 +0300] "GET /js/main.js.map HTTP/1.0" 404 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.69.195.104 - - [10/Jan/2026:08:55:16 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.70.35.191 - - [10/Jan/2026:09:02:37 +0300] "GET /?a=0992267543511 HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)" 172.71.255.124 - - [10/Jan/2026:09:05:06 +0300] "GET /?a=4194910593300 HTTP/1.0" 200 4093 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.150.167 - - [10/Jan/2026:09:11:11 +0300] "GET /sitemap.xml HTTP/1.0" 404 456 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 108.162.216.56 - - [10/Jan/2026:09:12:55 +0300] "GET /?j=eaesn32p3n2o20j HTTP/1.0" 200 51292 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.17.42 - - [10/Jan/2026:09:13:12 +0300] "POST /mod_pagespeed_beacon?url=http%3A%2F%2Fnoiseaware.com%2Fkorentest.html HTTP/1.0" 404 456 "https://safehaven.fund/?j=eaesn32p3n2o20j" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.56 - - [10/Jan/2026:09:14:29 +0300] "GET /?a=20088238219701 HTTP/1.0" 200 4089 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.56 - - [10/Jan/2026:09:23:52 +0300] "GET /?a=91797198672905 HTTP/1.0" 200 4102 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.79 - - [10/Jan/2026:09:33:14 +0300] "GET /?a=81282281561003 HTTP/1.0" 200 4105 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.100.198 - - [10/Jan/2026:09:36:42 +0300] "GET / HTTP/1.0" 200 2848 "-" "-" 172.69.17.43 - - [10/Jan/2026:09:42:37 +0300] "GET /?a=94896255697803 HTTP/1.0" 200 4088 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.183.109 - - [10/Jan/2026:09:47:05 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.71.255.123 - - [10/Jan/2026:09:50:26 +0300] "GET /?a=7101139147903 HTTP/1.0" 200 4138 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.126.81 - - [10/Jan/2026:09:51:59 +0300] "GET /?a=98798146700 HTTP/1.0" 200 4153 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.140 - - [10/Jan/2026:10:01:22 +0300] "GET /?a=74491153640301 HTTP/1.0" 200 4129 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.74.216 - - [10/Jan/2026:10:01:56 +0300] "GET /.env HTTP/1.0" 404 460 "-" "python-requests/2.26.0" 172.69.74.216 - - [10/Jan/2026:10:01:56 +0300] "GET / HTTP/1.0" 200 2848 "-" "python-requests/2.26.0" 172.71.255.123 - - [10/Jan/2026:10:11:44 +0300] "GET /?a=50907174177603 HTTP/1.0" 200 4092 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.1.153 - - [10/Jan/2026:10:11:58 +0300] "GET /css/animate.css HTTP/1.0" 200 4751 "https://safehaven.fund/?a=50907174177603" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.80 - - [10/Jan/2026:10:21:07 +0300] "GET /?a=4891570633901 HTTP/1.0" 200 4155 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.255.123 - - [10/Jan/2026:10:27:57 +0300] "GET /?a=58781114513301 HTTP/1.0" 200 4056 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.64.209.47 - - [10/Jan/2026:10:28:58 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:11 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:11 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:27 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:27 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:27 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:28 +0300] "POST /index-ajax.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.64.209.47 - - [10/Jan/2026:10:29:29 +0300] "GET /assets/images/accesson.php HTTP/1.0" 404 456 "https://safehaven.fund/index-ajax.php" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0" 172.69.6.141 - - [10/Jan/2026:10:30:29 +0300] "GET /?a=7122956316005 HTTP/1.0" 200 4116 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 162.158.182.151 - - [10/Jan/2026:10:38:51 +0300] "GET /?a=28693172600806 HTTP/1.0" 200 4102 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.46.84 - - [10/Jan/2026:10:46:25 +0300] "GET / HTTP/1.0" 200 2848 "http://www.safehaven.fund" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 172.71.255.124 - - [10/Jan/2026:10:48:14 +0300] "GET /?a=64776200503800 HTTP/1.0" 200 4100 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:10:57:36 +0300] "GET /?a=47722210232802 HTTP/1.0" 200 4082 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.59.9 - - [10/Jan/2026:11:09:59 +0300] "GET /?a=48524125971506 HTTP/1.0" 200 4087 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.239.40 - - [10/Jan/2026:11:12:21 +0300] "GET /sitemap.xml HTTP/1.0" 404 456 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" 162.159.98.176 - - [10/Jan/2026:11:12:35 +0300] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.98 - - [10/Jan/2026:11:12:35 +0300] "GET /wp-includes/assets/ty.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.98.98 - - [10/Jan/2026:11:12:35 +0300] "GET /xmlrpc.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 15_7_9 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.5 Mobile/15E148 Safari/604.1" 162.159.98.98 - - [10/Jan/2026:11:12:36 +0300] "GET /autoload_classmap.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.98 - - [10/Jan/2026:11:12:36 +0300] "GET /NewFile.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:37 +0300] "GET /adminfuns.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:37 +0300] "GET /inputs.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:38 +0300] "GET /upload.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:38 +0300] "GET /simple.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:39 +0300] "GET /alfa-rex.php7 HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:39 +0300] "GET /tinyy.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:39 +0300] "GET /makeasmtp.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:39 +0300] "GET /elp.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:39 +0300] "GET /flower.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:40 +0300] "GET /bala.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:40 +0300] "GET /goods.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:40 +0300] "GET /bolt.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 13; SM-S908E) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:40 +0300] "GET /man.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:41 +0300] "GET /bless.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:41 +0300] "GET /system.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.176 - - [10/Jan/2026:11:12:41 +0300] "GET /about.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:41 +0300] "GET /text.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:42 +0300] "GET /abcd.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:42 +0300] "GET /admin.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:42 +0300] "GET /files.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:42 +0300] "GET /file.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:43 +0300] "GET /moon.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:43 +0300] "GET /akcc.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:43 +0300] "GET /gecko-new.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:43 +0300] "GET /admin-header.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:44 +0300] "GET /edit.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.176 - - [10/Jan/2026:11:12:44 +0300] "GET /ioxi-o.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:44 +0300] "GET /info.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:44 +0300] "GET /lock360.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:45 +0300] "GET /ws.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:45 +0300] "GET /file4.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:45 +0300] "GET /wp-good.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.g (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:45 +0300] "GET /content.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/119.0.6045.109 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:46 +0300] "GET /wp-signup.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.176 - - [10/Jan/2026:11:12:46 +0300] "GET /log.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:46 +0300] "GET /hplfuns.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:46 +0300] "GET /ahax.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.176 - - [10/Jan/2026:11:12:47 +0300] "GET /atomlib.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:47 +0300] "GET /server.php HTTP/1.0" 404 456 "https://duckduckgo.com/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:47 +0300] "GET /wp-trackback.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 13; M2101K6G) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:47 +0300] "GET /radio.php HTTP/1.0" 404 456 "https://www.yahoo.com/" "Mozilla/5.0 (iPad; CPU OS 16_7_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:48 +0300] "GET /wp-setup.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:48 +0300] "GET /options.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/118.0 Mobile/15E148 Safari/605.1.15" 162.159.98.176 - - [10/Jan/2026:11:12:48 +0300] "GET /wp-user.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; LM-Q720) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:48 +0300] "GET /new.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:48 +0300] "GET /classwithtostring.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (iPad; CPU OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:49 +0300] "GET /bgymj.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 11; CPH2251) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:49 +0300] "GET /default.php HTTP/1.0" 404 456 "https://www.google.com/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:49 +0300] "GET /root.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0.1 Mobile/15E148 Safari/604.1" 162.159.98.176 - - [10/Jan/2026:11:12:49 +0300] "GET /wp-file.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:50 +0300] "GET /themes.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 13; SM-G991U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:50 +0300] "GET /gmo.php HTTP/1.0" 404 456 "https://www.google.co.uk/" "Mozilla/5.0 (Linux; Android 12; V2134) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:50 +0300] "GET /asasx.php HTTP/1.0" 404 456 "https://www.google.fr/" "Mozilla/5.0 (Linux; Android 11; 21081111RG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:50 +0300] "GET /xleet.php HTTP/1.0" 404 456 "https://www.google.de/" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Mobile Safari/537.36" 162.159.98.176 - - [10/Jan/2026:11:12:51 +0300] "GET /wp-error.php HTTP/1.0" 404 456 "https://www.bing.com/" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" 172.69.138.239 - - [10/Jan/2026:11:14:22 +0300] "GET / HTTP/1.0" 200 2848 "http://104.21.80.162:80/" "-" 108.162.216.57 - - [10/Jan/2026:11:17:42 +0300] "GET /?a=2818221624004 HTTP/1.0" 200 4115 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.130.51 - - [10/Jan/2026:11:23:06 +0300] "GET /?j=evncwcbecwbxi9s HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.176 - - [10/Jan/2026:11:23:07 +0300] "GET /css/templatemo_style.css HTTP/1.0" 200 3487 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.6.78 - - [10/Jan/2026:11:23:08 +0300] "GET /css/bootstrap.min.css HTTP/1.0" 200 17465 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.28 - - [10/Jan/2026:11:23:09 +0300] "GET /css/normalize.min.css HTTP/1.0" 200 1390 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.39 - - [10/Jan/2026:11:23:10 +0300] "GET /images/slider/slide1.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.110 - - [10/Jan/2026:11:23:10 +0300] "GET /css/templatemo_misc.css HTTP/1.0" 200 615 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.127.210 - - [10/Jan/2026:11:23:10 +0300] "GET /css/font-awesome.min.css HTTP/1.0" 200 60694 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.74 - - [10/Jan/2026:11:23:11 +0300] "GET /js/vendor/modernizr-2.6.2.min.js HTTP/1.0" 200 6561 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 108.162.216.162 - - [10/Jan/2026:11:23:12 +0300] "GET /images/slider/slide2.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.210 - - [10/Jan/2026:11:23:12 +0300] "GET /images/slider/slide3.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.179.209 - - [10/Jan/2026:11:23:13 +0300] "GET /images/slider/slide4.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.224 - - [10/Jan/2026:11:23:13 +0300] "GET /images/slider/slide5.jpg HTTP/1.0" 304 146 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.172 - - [10/Jan/2026:11:23:14 +0300] "GET /js/vendor/jquery-1.10.1.min.js HTTP/1.0" 200 33154 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.188 - - [10/Jan/2026:11:23:15 +0300] "GET /js/jquery.easing-1.3.js HTTP/1.0" 200 2306 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.22 - - [10/Jan/2026:11:23:15 +0300] "GET /js/bootstrap.js HTTP/1.0" 200 11428 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.130.170 - - [10/Jan/2026:11:23:16 +0300] "GET /js/plugins.js HTTP/1.0" 200 13370 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.7.103 - - [10/Jan/2026:11:23:16 +0300] "GET /js/main.js HTTP/1.0" 200 983 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.143 - - [10/Jan/2026:11:23:17 +0300] "GET /images/slider/thumb1.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.92 - - [10/Jan/2026:11:23:17 +0300] "GET /images/slider/thumb2.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.169 - - [10/Jan/2026:11:23:18 +0300] "GET /images/slider/thumb3.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.255.127 - - [10/Jan/2026:11:23:18 +0300] "GET /images/slider/thumb4.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.58.88 - - [10/Jan/2026:11:23:19 +0300] "GET /images/slider/thumb5.jpg HTTP/1.0" 304 145 "https://safehaven.fund/?j=evncwcbecwbxi9s" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.130.196 - - [10/Jan/2026:11:23:19 +0300] "GET /images/templatemo_logo.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.255.124 - - [10/Jan/2026:11:23:20 +0300] "GET /images/service-second.png HTTP/1.0" 304 145 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.126.5 - - [10/Jan/2026:11:23:20 +0300] "GET /images/t-right.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.131.13 - - [10/Jan/2026:11:23:20 +0300] "GET /images/t-left.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.100.212 - - [10/Jan/2026:11:23:21 +0300] "GET /images/service-third.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.54 - - [10/Jan/2026:11:23:21 +0300] "GET /fonts/fontawesome-webfont.woff?v=4.0.3 HTTP/1.0" 304 145 "https://safehaven.fund/css/font-awesome.min.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.71.1.152 - - [10/Jan/2026:11:23:22 +0300] "GET /images/service-first.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.70.131.174 - - [10/Jan/2026:11:23:22 +0300] "GET /images/service-fourth.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.59.205 - - [10/Jan/2026:11:23:23 +0300] "GET /images/active-state.png HTTP/1.0" 304 144 "https://safehaven.fund/css/templatemo_style.css" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.169 Safari/537.36" 172.69.17.42 - - [10/Jan/2026:11:28:25 +0300] "GET /?a=467399141600 HTTP/1.0" 200 4107 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.80 - - [10/Jan/2026:11:39:07 +0300] "GET /?a=0085956145008 HTTP/1.0" 200 4150 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.159.93 - - [10/Jan/2026:11:46:18 +0300] "GET /index.php/jk HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:103.0) Gecko/20100101 Firefox/103.0" 172.69.59.9 - - [10/Jan/2026:11:49:51 +0300] "GET /?a=1211465083604 HTTP/1.0" 200 4132 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.160.173 - - [10/Jan/2026:11:52:42 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 172.70.126.81 - - [10/Jan/2026:12:00:33 +0300] "GET /?a=24749101226506 HTTP/1.0" 200 4060 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.130.51 - - [10/Jan/2026:12:04:37 +0300] "GET /?a=43920169007204 HTTP/1.0" 200 4070 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 104.23.211.41 - - [10/Jan/2026:12:14:06 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" 172.69.59.10 - - [10/Jan/2026:12:14:16 +0300] "GET /?a=1072283006400 HTTP/1.0" 200 4098 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 108.162.216.57 - - [10/Jan/2026:12:21:59 +0300] "GET /?a=14871115548200 HTTP/1.0" 200 4067 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.6.141 - - [10/Jan/2026:12:32:42 +0300] "GET /?a=95014275985601 HTTP/1.0" 200 4109 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.69.59.10 - - [10/Jan/2026:12:43:25 +0300] "GET /?a=17801278637200 HTTP/1.0" 200 4132 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.70.179.80 - - [10/Jan/2026:12:54:08 +0300] "GET /?a=00869114573603 HTTP/1.0" 200 4075 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.68.87.141 - - [10/Jan/2026:12:59:47 +0300] "GET /.well-known/traffic-advice HTTP/1.0" 404 456 "-" "Chrome Privacy Preserving Prefetch Proxy" 172.68.87.140 - - [10/Jan/2026:12:59:47 +0300] "GET /?j=ejx7ialwyuljy72 HTTP/1.0" 200 2848 "https://www.google.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.68.174.66 - - [10/Jan/2026:13:00:18 +0300] "GET / HTTP/1.0" 200 2848 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36"